Description: This security update resolves a privately reported vulnerability in the Windows kernel. A local attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could then install programs; view, change, or delete data; or create new accounts. Keep reading →

Microsoft has released security bulletin MS07-053. The security bulletin contains all the relevant information about the security update. This information includes file manifest information and deployment options. To view the complete security bulletin, visit one of the following Microsoft Web sites:

• Home users:
  

  ” title=”http://www.microsoft.com/technet/security/bulletin/ms07-053.mspx

” class=”autohyperlink” target=”_blank”>www.microsoft.com/technet/security/bulletin/ms07-053.mspx

A post on the Microsoft Security Response Center Blog notes that proof of concept code has been publicly posted that could allow local elevation of privileges on Vista (as well as 2000, XP, and Server 2003). Here’s the meat of the post: Keep reading →